Skip to content

Commit 0870e86

Browse files
committed
docs(linuxkm): document DTLS 1.3 configure flags
1 parent 5151a69 commit 0870e86

1 file changed

Lines changed: 18 additions & 0 deletions

File tree

linuxkm/README.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,24 @@ $ sudo modprobe libwolfssl
5757
| `--enable-intelasm` | x86/amd64 crypto acceleration |
5858
| `--enable-cryptonly` | Omit TLS/DTLS implementation (normally recommended) |
5959

60+
### Enabling DTLS 1.3 in the kernel module
61+
62+
`--enable-linuxkm` does not implicitly enable TLS 1.3 or DTLS, so the DTLS 1.3
63+
configure check (`configure.ac:5634-5636`) requires all three flags to be
64+
passed explicitly:
65+
66+
```sh
67+
./configure --enable-linuxkm \
68+
--enable-tls13 --enable-dtls --enable-dtls13 \
69+
--with-linux-source=/lib/modules/$(uname -r)/build
70+
make -j$(nproc) module
71+
```
72+
73+
The resulting `linuxkm/libwolfssl.ko` exports the DTLS 1.3 entry points
74+
(`wolfDTLSv1_3_client_method`, `wolfDTLSv1_3_server_method`, etc.) as GPL
75+
kernel symbols, available to other in-kernel consumers via
76+
`EXPORT_SYMBOL_GPL`.
77+
6078
### Additional configuration options for verification, performance evaluation, and troubleshooting
6179

6280
| option | description |

0 commit comments

Comments
 (0)